Skip to content
OpenAdvisories

Package · PyPI

gradio

52 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-47167 Public exploit

    SSRF in the path parameter of /queue/join in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to_cache` function allows attackers to force the Gradio server…

    gradio-app gradio gradio PyPI
  • High 7.5
    CVE-2024-4253 Public exploit

    Command Injection in gradio-app/gradio

    A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modi…

    gradio-app gradio-app/gradio gradio PyPI
  • High 7.5
    CVE-2024-1561 Public exploit Scanner template

    Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio

    An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the invocation of any method on a `Component` class with attacker-controlled arguments. Specifically, by exploiting the `move_resource_to_block_cache()` met…

    gradio-app gradio-app/gradio gradio PyPI
  • Critical 9.6
    CVE-2023-6572 Public exploit

    Command Injection in gradio-app/gradio

    Command Injection in GitHub repository gradio-app/gradio prior to main.

    gradio-app gradio-app/gradio gradio PyPI